Privacy Policy

Last updated: 15 March 2026

This Privacy Policy explains how Kanakkupaaru (“we”, “us”, “our”) collects, uses, and protects your personal information when you use kanakkupaaru.in.

1. Information We Collect

1.1 Information you provide

• Email address — for account creation and login
• Financial data you enter — asset names, values, quantities, purchase dates, and notes you manually add
• Feedback and messages — content you submit via our Feedback or Contact pages

1.2 Information collected automatically

• Usage data — pages visited, features used, and time spent (via Supabase analytics)
• Device data — browser type, operating system, and IP address (for security)
• Session cookies — required for authentication only

1.3 Information we do NOT collect

We want to be explicit about what we never collect or store:

• PAN card numbers
• Aadhaar numbers
• Bank account numbers or IFSC codes
• Demat account credentials or broker passwords
• UPI IDs
• Credit or debit card details (handled entirely by Razorpay)

When you import broker files (Groww, Angel One, INDmoney), those files are processed entirely in your browser. Personal identifiers in those files (PAN, mobile number, client name) are detected and deliberately ignored — they are never sent to our servers.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Authenticate your account and maintain sessions
• Calculate and display your net worth and financial data
• Send service-related emails (account notifications, payment receipts)
• Respond to your support requests and feedback
• Improve the Service based on aggregated usage patterns

We do not sell your data to third parties, use your data for advertising, or share your financial data with any external company.

3. Data Storage

Your data is stored securely on Supabase (PostgreSQL), hosted on AWS infrastructure with servers in the Asia Pacific (Mumbai) region. All data is encrypted in transit (TLS 1.2+) and at rest using AES-256 encryption.

4. Third-Party Services

We use the following third-party services. None of these services have access to your financial portfolio data.

5. Data Retention

• Your account data is retained as long as your account is active
• If you delete your account, all personal data is permanently deleted within 30 days
• Payment records may be retained for 7 years as required by Indian law

6. Your Rights

Under applicable Indian data protection laws, you have the right to:

• Access — request a copy of your personal data
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and all associated data
• Portability — export your financial data via Settings → Export

To exercise these rights, email us at support@kanakkupaaru.in. We will respond within 30 days.

7. Cookies

We use only essential session cookies required for authentication. We do not use advertising or tracking cookies. You cannot opt out of essential cookies as they are required for the Service to function.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We will notify you of material changes to this Privacy Policy via email or a notice on the Service at least 30 days before they take effect.

10. Contact

For privacy-related questions or to exercise your rights:

Kanakkupaaru
Email: support@kanakkupaaru.in
Website: kanakkupaaru.in